What’s Vulnerable › Vulnerabilities

CVE-2018-7959

• Severity: medium (CVSS 5.9 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-11-27 · updated 2026-06-17
• Weakness: CWE-327

Description

There is a short key vulnerability in Huawei eSpace product. An unauthenticated, remote attacker launches man-in-the-middle attack to intercept and decrypt the call information when the user enables SRTP to make a call. Successful exploitation may cause sensitive information leak.

Affected products

• Huawei Technologies Co., Ltd. eSpace 7950: v200r003c30

References

• http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20181114-02-espace-en
• http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20181114-02-espace-en

Get alerted when CVE-2018-7959 or the next vulnerability affects your stack